ICAEW SE · Chapter 10 · Question 3 of 10
A company collected customers' personal data to process deliveries. It now wants to use the same data, without telling customers, to build profiles for a third party's marketing campaigns. Which data protection principle does this most directly breach?
Test yourself: pick an answer
Reveal answer & explanation
Correct answer: B) Purpose limitation
Explanation
Purpose limitation requires personal data to be collected for specified, explicit and legitimate purposes and not further processed in a way that is incompatible with those purposes. Using delivery data for third-party marketing without informing customers is an incompatible new purpose. It would also raise concerns about transparency and fairness.
More Data ethics and the impact of technology MCQs
- Q5A management accountant is given sustainability data from a supplier to include in the company's report. Which action best reflects the…
- Q6A company uses a complex artificial intelligence (AI) model to make credit decisions, but cannot explain to rejected applicants why they…
- Q7An accountant uses an AI tool to draft a client's disclosure notes. The draft looks professional but cites an accounting standard…
- Q8What is the main purpose of data protection legislation such as the UK GDPR and the Data Protection Act 2018?
- Q9A trainee pastes a client's unpublished financial forecasts into a free public generative AI tool to help write a summary. Which is the…